# ELSA-2022-0185: Security update for 23 packages ELSA-2022-0185, released January 24, 2022, fixes 15 CVEs across 23 products. None of them is reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/fix/linux/elsa-2022-0185 - Platform: Linux - Released: Jan 24, 2022 - Priority: Routine (Closes 15 CVEs, none high severity) - CVEs: 15, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2022-0185.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [java-11-openjdk](https://patchblox.com/security/data/product/linux/java-11-openjdk.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-demo](https://patchblox.com/security/data/product/linux/java-11-openjdk-demo.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-demo-fastdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-demo-fastdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-demo-slowdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-demo-slowdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-devel](https://patchblox.com/security/data/product/linux/java-11-openjdk-devel.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-devel-fastdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-devel-fastdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-devel-slowdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-devel-slowdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-fastdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-fastdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-headless](https://patchblox.com/security/data/product/linux/java-11-openjdk-headless.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-headless-fastdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-headless-fastdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-headless-slowdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-headless-slowdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-javadoc](https://patchblox.com/security/data/product/linux/java-11-openjdk-javadoc.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-javadoc-zip](https://patchblox.com/security/data/product/linux/java-11-openjdk-javadoc-zip.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-jmods](https://patchblox.com/security/data/product/linux/java-11-openjdk-jmods.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-jmods-fastdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-jmods-fastdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-jmods-slowdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-jmods-slowdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-slowdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-slowdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-src](https://patchblox.com/security/data/product/linux/java-11-openjdk-src.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-src-fastdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-src-fastdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-src-slowdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-src-slowdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-static-libs](https://patchblox.com/security/data/product/linux/java-11-openjdk-static-libs.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-static-libs-fastdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-static-libs-fastdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | | [java-11-openjdk-static-libs-slowdebug](https://patchblox.com/security/data/product/linux/java-11-openjdk-static-libs-slowdebug.md) | ol 8 | 1:11.0.14.0.9-2.el8_5 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-21293](https://patchblox.com/security/data/cve/CVE-2022-21293.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption | 5.3 | 0.0835 | | | [CVE-2022-21340](https://patchblox.com/security/data/cve/CVE-2022-21340.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption | 5.3 | 0.0775 | | | [CVE-2022-21283](https://patchblox.com/security/data/cve/CVE-2022-21283.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Protection Mechanism Failure | 5.3 | 0.0378 | | | [CVE-2022-21341](https://patchblox.com/security/data/cve/CVE-2022-21341.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Deserialization of Untrusted Data | 5.3 | 0.0377 | | | [CVE-2022-21248](https://patchblox.com/security/data/cve/CVE-2022-21248.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:… | 5.3 | 0.0376 | | | [CVE-2022-21360](https://patchblox.com/security/data/cve/CVE-2022-21360.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption | 5.3 | 0.0349 | | | [CVE-2022-21365](https://patchblox.com/security/data/cve/CVE-2022-21365.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:… | 5.3 | 0.0349 | | | [CVE-2022-21299](https://patchblox.com/security/data/cve/CVE-2022-21299.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption | 5.3 | 0.0346 | | | [CVE-2022-21294](https://patchblox.com/security/data/cve/CVE-2022-21294.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Allocation of Resources Without Limits or Throttling | 5.3 | 0.0335 | | | [CVE-2022-21366](https://patchblox.com/security/data/cve/CVE-2022-21366.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption | 5.3 | 0.0322 | | | [CVE-2022-21277](https://patchblox.com/security/data/cve/CVE-2022-21277.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption | 5.3 | 0.0309 | | | [CVE-2022-21291](https://patchblox.com/security/data/cve/CVE-2022-21291.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Improper Access Control | 5.3 | 0.0290 | | | [CVE-2022-21282](https://patchblox.com/security/data/cve/CVE-2022-21282.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Improper Restriction of XML External Entity Reference | 5.3 | 0.0288 | | | [CVE-2022-21296](https://patchblox.com/security/data/cve/CVE-2022-21296.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | 0.0283 | | | [CVE-2022-21305](https://patchblox.com/security/data/cve/CVE-2022-21305.md) | Routine | Microsoft Build of OpenJDK with Hotspot 11: Improper Access Control | 5.3 | 0.0276 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo